Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368fd328-bc79-4467-9970-6483f6aa11a2.roa
File:                     368fd328-bc79-4467-9970-6483f6aa11a2.roa (raw, json)
Hash identifier:          dBa5m54JvBAOmX8Y+GfX3hOuY7W0KIeym/sS/p4DeQY=
Subject key identifier:   09:E9:D6:3D:82:B7:AA:87:F0:CE:92:87:78:1F:FB:6D:A7:C5:80:CF
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       01E0082AF40F5BB951E573A15C0CF7B980AA7B89
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368fd328-bc79-4467-9970-6483f6aa11a2.roa
Signing time:             Fri 31 Oct 2025 01:56:33 +0000
ROA not before:           Fri 31 Oct 2025 01:56:33 +0000
ROA not after:            Fri 05 Dec 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:3ecc::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e0:08:2a:f4:0f:5b:b9:51:e5:73:a1:5c:0c:f7:b9:80:aa:7b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Oct 31 01:56:33 2025 GMT
            Not After : Dec  5 23:59:59 2025 GMT
        Subject: serialNumber=d8361ebef693d409806c65d10292abd15b9e8ba461ad179a432e7370f547dfef, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:ae:21:6b:74:cf:a2:79:e3:6f:77:41:78:
                    00:65:69:b4:f0:af:e4:40:79:db:4b:cd:79:22:e8:
                    e2:3f:ac:01:f5:8a:3e:94:01:31:85:c1:2a:0e:0c:
                    30:67:7c:3e:82:2e:2b:10:96:3b:9b:1f:3f:3b:06:
                    7c:90:f2:7a:bb:58:0e:6c:25:4e:ae:a2:70:f0:65:
                    2d:31:41:9e:6b:42:4f:72:42:d3:7d:b8:54:f9:7f:
                    f2:a9:c4:8f:db:16:92:33:44:47:3c:13:21:5a:70:
                    9a:55:ef:1d:c0:3d:b9:de:f8:1f:65:e3:74:6d:cb:
                    2e:7e:06:ae:a2:28:45:41:d0:01:02:fc:6f:e7:22:
                    c0:be:51:2b:eb:de:df:75:f4:71:c4:76:29:e6:97:
                    de:2a:4d:8e:63:15:4d:ce:e5:13:e1:0e:c9:07:6c:
                    9b:29:11:fb:1c:62:1f:be:a5:7d:4f:25:0b:a0:cb:
                    49:dd:f4:92:fe:c3:97:40:89:ba:be:82:1e:8a:d2:
                    12:a2:67:99:9b:81:cd:e6:e4:68:ae:d0:5f:61:80:
                    1b:c7:14:3a:2b:a0:65:f2:dd:84:b9:2c:3f:ba:a6:
                    87:a0:32:46:52:49:ae:82:10:38:97:50:b1:b4:ee:
                    64:ba:df:c1:94:cb:c3:fc:dc:3b:10:d4:aa:b4:5b:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:D6:3D:82:B7:AA:87:F0:CE:92:87:78:1F:FB:6D:A7:C5:80:CF
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/368fd328-bc79-4467-9970-6483f6aa11a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:3ecc::/47

    Signature Algorithm: sha256WithRSAEncryption
         73:97:09:fb:cd:a2:cb:47:00:d9:c2:01:65:c7:3f:ae:91:a5:
         cb:34:18:c6:2b:43:4d:1b:78:79:12:8c:9b:7f:75:37:99:ed:
         7c:90:8d:f5:d7:ff:d6:3a:b4:46:64:ab:87:50:b9:27:62:04:
         1b:f9:dd:07:17:8d:86:9e:ab:1d:f1:e6:5b:73:77:97:db:54:
         d7:62:93:cf:4e:40:10:0a:81:87:7c:44:d8:76:cc:27:27:e5:
         f3:73:00:80:fd:e5:79:fb:43:7c:69:28:1c:2c:96:0d:d1:68:
         c4:5b:9c:a6:70:e5:5a:d9:03:19:e6:b2:1d:40:e1:c2:2f:6b:
         ea:8f:51:43:00:84:89:3b:6e:b9:bd:4c:2e:50:34:c9:2b:8c:
         f4:b7:67:09:1b:01:69:5b:8d:5b:36:d9:b7:91:ff:03:29:d3:
         64:11:a1:67:d7:99:19:e0:27:a0:9d:88:80:26:8a:67:78:f7:
         47:7a:81:6f:74:86:74:b2:47:0a:cf:81:69:e4:98:74:88:ff:
         0e:18:77:fb:dd:c5:04:20:59:ed:ef:69:77:6a:4f:cf:fe:c9:
         23:4a:3a:15:02:eb:9c:60:4a:8e:24:3c:5b:af:fd:1b:5f:63:
         62:45:ac:cf:7a:f1:93:c9:6d:2c:ce:5d:9d:58:59:5d:d2:b6:
         50:5d:3e:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:39:11 2025 by rpki-client